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Petascale, high-performance file systems often hold sensitive data and thus require 
security, but authentication and authorization can dramatically reduce performance. 
Existing security solutions perform poorly in these environments because they 
cannot ... 
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The Java Data Objects (JDO) specification proposes a transparent and database- 
independent persistence abstraction layer for Java. Since JDO is designed as a 
lightweight persistence approach, it does not provide any authentication or 
authorization capabilities ... 
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The current model for flow establishment in the Internet: DNS Names, IP addresses, 
and transport ports, is inadequate. Not all of the problem is due to the small IPv4 
address space and resulting NAT boxes. Even where global addresses exist, 
firewalls ... 
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The focus of access control in client/server environments is on protecting sensitive 
server resources by determining whether or not a client is authorized to access those 
resources. The set of resources is usually static, and an access control policy ... 
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As use of the Internet in commerce, education and personal communication has 
become common, the question of Internet voting in local and national elections 
naturally arises. In addition to adding convenience and precision, some believe that 
Internet ... 
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The Post-PC revolution is bringing information access to a wide range of devices 
beyond the desktop, such as public kiosks, and mobile devices like cellular 
telephones, PDAs, and voice based vehicle telematics. However, existing deployed 
Internet services ... 
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The three fundamental resources underlying Information Technology are bandwidth, 
storage, and computation. The goal of wide area infrastructure is to provision these 
resources to enable applications within a community. The end-to-end principles 
provide ... 
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Policy enforcement is an integral part of many applications. Policies are often used to 
control access to sensitive information. Current policy specification languages give 
users fine-grained control over when and how information can be accessed, and ... 
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Our work addresses protection of hardware I Pat the mask level with the goal of 
preventing unauthorized manufacturing. The proposed protocol based on chip locking 
and activation is applicable to a broad category of electronic systems with a primary 
bus. ... 
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Naive use of XML Signature may result in signed documents remaining vulnerable to 
undetected modification by an adversary. In the typical usage of XML Signature to 
protect SOAP messages, an adversary may be capable of modifying valid messages 
in ... 
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Conference control has been an area of intensive research over the years but widely 
accepted robust and scalable solutions and standards are still lacking. The main 
conference control components are conference management and floor (resource) 
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This paper presents Sharp, a framework for secure distributed resource management 
in an Internet-scale computing infrastructure. The cornerstone of Sharp is a 
construct to represent cryptographically protected resource < it> claim s< / it> — 
prom ises ... 
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For an effective handling of crosscutting concerns during the software process, 
adequate support is required not only in design and coding, but also in requirements 
engineering. For this purpose, we have developed an aspectoriented extension of the 
requirements ... 
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Under scientific collaborations, resource sharing tends to be highly dynamic and 
often ad hoc. The dynamic characteristics and sharing patterns of ad-hoc 
collaborative sharing impose a need for comprehensive and flexible approaches to 
reflect and cope ... 
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Grid computing promises gains in effective computational power, resource utilization, 
and resource accessibility, but in order to achieve these gains, organizations must 
deploy grid middleware that, in most cases, does not adhere to fundamental 
security ... 

Keywords: SSH, access control, authentication, authorization, delegation, 
distributed systems, grids, middleware, security, single sign-on 

20 connection establishment 

Saikat Guha, Paul Francis 

August SI GCOMM '07: Proceedings of the 2007 conference on Applications, 
2007 technologies, architectures, and protocols for computer communications 

Publisher: ACM 

Full text available: <pi ...... . < 

i_i ' Additional Information: ci^vo;:, ^ •;<■.:•,,:, •■..•oi-v.^ooK, ;;kv.\.< :o;;:;\- 

KB) 

Bibliometrics: Downloads (6 Weeks): 24, Downloads (12 Months): 324, Citation Count: 0 



http://portal.acm.org/results.cfm?within=&^ (8 of 9)8/25/2008 2: 17:05 PM 



Results (page J ): (authenticate, and authorize, and individually) 



The current model for flow establishment in the Internet: DNS Names, I P addresses, 
and transport ports, is inadequate. Not all of the problem is due to the small IPv4 
address space and resulting NAT boxes. Even where global addresses exist, 
firewalls ... 

Keywords: NUTSS, end-middle-end, off-path, on-path, signaling 

Results 1 - 20 of 23 Result page: 1 2 next 
> > 

The ACM Portal is published by the Association 
for Computing Machinery. Copyright © 2008 ACM, Inc. 

Terms of Usag e Privacy Policy £qj1o Qoni^LLiS 

Useful downloads: B Adobe Acrobat €* l QuickTime ill Windows Media Player ^^ReaLPlayer 



http://portal.acm.org/results.cfm?within=&CFID=51 l...=OR&isbnhow=OR&isbn=&doi=&ccs=&subj=&Go.x=6&Go.y=2 (9 of 9)8/25/2008 2: 17:05 PM 



